certifyclouds 1.3.4__tar.gz → 1.3.6__tar.gz

{certifyclouds-1.3.4 → certifyclouds-1.3.6}/.gitignore

@@ -176,3 +176,4 @@ scripts/lab/.cf-origin-certs/
 scripts/lab/.db-password-*.backup
 scripts/lab/.deploy-sso-secret
 scripts/lab/.cloud-creds/
+.preflight-venv/

{certifyclouds-1.3.4 → certifyclouds-1.3.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: certifyclouds
-Version: 1.3.4
+Version: 1.3.6
 Summary: Scan Azure Key Vaults for expiring secrets, certificates, and keys
 Project-URL: Homepage, https://certifyclouds.com/scanner
 Project-URL: Documentation, https://docs.certifyclouds.com/scanner

{certifyclouds-1.3.4 → certifyclouds-1.3.6}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "certifyclouds"
-version = "1.3.4"
+version = "1.3.6"
 description = "Scan Azure Key Vaults for expiring secrets, certificates, and keys"
 readme = "README.md"
 license = { text = "Apache-2.0" }

{certifyclouds-1.3.4 → certifyclouds-1.3.6}/src/cc_scanner/__init__.py

@@ -1,3 +1,3 @@
 """CertifyClouds Scanner — scan Azure Key Vaults for expiring secrets, certificates, and keys."""
 
-__version__ = "1.3.4"
+__version__ = "1.3.6"

{certifyclouds-1.3.4 → certifyclouds-1.3.6}/src/cc_scanner/cli.py

@@ -25,6 +25,22 @@ from .security import analyze, has_critical_or_high
 console = Console()
 
 
+def _is_newer_version(latest: str, current: str) -> bool:
+    """True if `latest` is strictly higher than `current` as dotted-integer semver.
+
+    Uses tuple comparison on `int`-parsed segments. Returns False on any
+    parse failure (e.g. pre-release suffixes like "1.3.5rc1") — we'd
+    rather skip the banner than tell the user to upgrade from a newer
+    dev build to an older release.
+    """
+    try:
+        return tuple(int(p) for p in latest.split(".")) > tuple(
+            int(p) for p in current.split(".")
+        )
+    except (ValueError, AttributeError):
+        return False
+
+
 _LOGO_LINES = [
     "                                 ▄▄███▄▄                         ",
     "                             ▄▄███▀▀ ▀▀███▄▄                     ",
@@ -268,7 +284,12 @@ def main(
             "keys": results.get("totalKeys", 0),
             "expired": sum(expiry_summary["expired"].values()),
             "expiringSoon": sum(expiry_summary["30_days"].values()),
-            "securityFindings": len(findings),
+            # Per fleet-telemetry decision (1.3.5 + main app 1.4.12): we
+            # no longer send `securityFindings` count. A customer's
+            # compliance-violation count is sensitive (it reveals the
+            # security posture of their estate to HC), and the count
+            # has zero customer-success value to HC anyway — only
+            # specifics could help, and we don't collect those.
             "vaultsWithErrors": results.get("vaultsWithErrors", 0),
             "scanDurationMs": scan_duration_ms,
         }
@@ -282,7 +303,7 @@ def main(
                 console.print()
             elif validation.offline and validation.error:
                 console.print(f"[dim]{validation.error}. Scanning in offline mode.[/dim]")
-            elif validation.latest_version and validation.latest_version != __version__:
+            elif validation.latest_version and _is_newer_version(validation.latest_version, __version__):
                 console.print(f"[dim]Update available: cc-scan {__version__} → {validation.latest_version} — pip install --upgrade certifyclouds[/dim]")
                 if validation.release_notes:
                     console.print(f"[dim]  What's new: {validation.release_notes}[/dim]")